CLAIMS 



What is claimed is: 

1. A versatile customizable security and filtering software that can be installed on a 
computer and be used by a remote user who obtains anonymity on a global telecommunicarions 
network or by a local user, the software comprising: 

(a) an administrative module that a user interacts with for creating user accounts and 
configuring those user accounts, and for configuring automated services, 

,he administrative module for accepting user inputs for configuration settings for inbound 
communications and for outbound communications, and having lis, maintenance ft.ne.ions 
including list editing ,1st deleting, searching of lists, saving of lists, proxy chaining routing, adding 
and deleting users, interchanging lists and importing and exporting lists, 

said administrative modme for configuring a range of access levels and being capable of 
creating three types of user accounts that have unique user name, and passwords for each user 
account including an administrator account that is self-confi^ring and that control automated 
services and selects for each account hard filtering or soft filtering, regular accounts with 
administrative privileges other than the privilege to create additiona, accounts, view information 
on any other accounts or configure automated services and regular accounts without 
administrative privifeges and in addition a fourth type of user account namefy one anonymous 
guest user account to be used in a manual launch of the software by genera, users who have no 
system-based user name or password, 
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,he administrative module for storing as encrypted files on hardware memory the 
configurations of me range of access level, for the user accounts created and the configurations of 

the automated services 

(b) an application server including 

(i) a domain filtering engine capable of using from the encrypted files a friendly 
outbound fist and an unfriendly outbound list only one of which is active a« any given time and an 
outbound exception fist, and using a friendly inbound lis, and an unfriend., inbound fist only one 
of which is active a. any given time, and a domain inbound exception lis, the friendly outbound 
K, ,he unfriendly outbound lis,, the friendly inbound list, the unfriendly inbound lis,, the 
outbound exception lis,, tire domain inbound exception lis,, a friendly e-mail lis, and an unfriendly 
e-mail list being uniquely configured for each user account, 

the domain filtering engine capable of registering the request in a logfile of all web 
sites requested by a user and capable of performing domain filtering, said domain filtering 
including for inbound requests checking the identity of a requesting remofe client against the 
friendly inbound or unfriendly inbound fist and domain inbound exception lis, maintained in the 
encrypted files and mcfuding for outbound reuuests checking loca. user and remote user requested 
domains, URLs and links against the friendly outbound fist, unfriendly outbound lis, and outbound 
exception fist and then wifb respec. to both inbound and outbound requests for hard filtering 

the request, terminating the request or terminating and re-routing .be request without the 
knowledge of the user, and for soft filtering unJess overruled by the outbound exception lis, or 
domain inbound exception lis. passing disapproved requests and sending an e-mafi alert to 
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authorized recipients regarding the disapproved request, and 

(ii) a content filtering engine capable of performing content filtering including 
checking a content of a requested document against a friendly content inbound list, an unfriendly 
content inbound list, and a content exception list taken from the encrypted files, the friendly 
content inbound list, the unfriendly content inbound list, only one of the friendly content inbound 
list and the unfriendly content inbound list being active at any given time, and the content 
exception list being uniquely configured by each user, and then for hard filtering against the 
unfriendly content inbound list either passing the requested document if the content of the 
requested document is not on the unfriendly content inbound list or unless overruled by the 
content exception list rejecting the requested document if the content of the requested document 
is on the unfriendly content inbound list and for hard filtering against the friendly content inbound 
list either unless overruled by the content exception list passing the requested document if the 
content of the requested document is on the friendly content inbound list or rejecting the 
requested document if the content of the requested document is not on the friendly content 
inbound list and for soft filtering against the unfriendly content inbound list either approving the 
content of the requested document and passing the requested document if the content is not on 
the unfriendly content inbound list or unless overruled by the content exception list rejecting the 
content of the requested document and passing a remainder of the requested document if the 
content is on the unfriendly content inbound list and for soft filtering against the friendly content 
inbound list either unless overruled by the content exception list passing the requested document 
if the content is not on the friendly content inbound list or passing the requested document and 
highlighting the content of the requested document if the content is on the friendly content 
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inbound list, said content filtering also ineluding e-mail filtering that ehecks a subject, a sender's 
address and a sender's domain against an unfriendly e-mail list, a friendly e-mail lis. and an e-mail 
exception list, 

the application server acting internally to communicate with the domain filtering engine 
and with the content filtering engine and acting externally as a proxy server that receives requests 
from HTTP clients, forwards the requests to servers, receives a server response and forwards the 
server response to the HTTP clients. 

2. The software of claim 1, wherein the domain filtering engine also has an optional e-mail 
alert system for hard filtering and for soft filtering. 

3. The software of claim 1, wherein the content filtering engine has an inbound privacy 
shield for blocking scripting language functions for particular user accounts and where the domain 
filtering engine has an outbound privacy shield for blocking disapproved character strings 
representing confidential information. 

4. The software of claim 1, wherein the content filtering engine, when performing hard 
filtering, can also replace a requested document that has been rejected with a replacement 
document selected by a user of the administrator account 

5. The software of claim 1, wherein the content filtering engine includes a pop up blocker 
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« The software of data 1. including an automated scheduier .ha, co»tr„.s a launching of 

^^^^^^^^^^^ 
off an aeeess to a world wide web, and inciudes an au.oma.ed B,t update. ,ha. upda.es .he 
ttendiy inbound Us, .be unfriendly inbound K. .he friend., outbound Us. and ,he unfriend, 
oulbound lists for each user account from links on the web. 

7. The software of claim 1, wherein inbound communications are arranged so .ha. an 
actual location of a highly sensitive resource is located in an unpublished location .ha, is a 
repl acemen, ,oca,i„n ,o which quests rejected by «he application server are rerouted, wherent 

application server to the rep.acemenUoca.ion, and wherein unapproved users are no. .i,ed in .he 
information. 

8 . The system of daim 7, whereinthe range of access ievels ranges ftom maximum 100% 
access to full suspension. 

9 The software of claim 1, wherein the administrative module includes an editor, the 
en^.ingattheusefsop.ional.oro.yapor.lonofane.mai.messageandanoromyapor.ion 
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a combination of files on a hard drive local to the software. 

— '- B^P * -,,- 

receives a server response and forwards the server response through the zero or tnore 

server response to HTTP clients. 

The software of Cain. ., wherein tire administrative module is also capahle of 

• ♦ fiu for accessing the global telecommunications 
configuring an automated configuration script file for accessing g 

network. 

12The software of Cain,., wherein for e-mai, filtering indodes an option of hard e-mail 



user. 



,3. A versatile customizable security and filtering software, comprising; 
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W an adrninistrative moduie that a use, interacts with fot creating user accounts and 
conflguringthoseuser accounts, and for configuring automated services, 

the admin moduie for accepting user inputs for configuration settings for inbound 
cormuunications and for outbound cotnmunications, and having Us, maintenance mnctions 

and deleting users, interchanging lists and importing and exporting lists, 

said administrative module for configuring a range of access levels and being capable of 

on any otber accounts or configure automated services and regular accounts without 
^estuser account t0 be used in a manna, .aunchoftttesofiware by genera, users who have no 
system-based user name or password, 

services 

(b) an application server including 

(0 a domain fihering engine capab,e of using from the encrypted ffles a «end,y 
0utb0 u„d„st and anunMendly outbound,,, only one of which ,s active a, any giventimeand an 
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of which is active at any given time, and a domain inbound exception list, the friendly outbound 
list, the unfriendly outbound list, the outbound exception list, the domain inbound exception list, a 
friendly e-mail list and an unfriendly e-mail list being uniquely configured for each user account, 

the domain filtering engine capable of registering the request in a logfile of all web 
sites requested by a user and capable of performing domain filtering, said domain filtering 
including domain inbound exception list maintained in the encrypted files and including for 
outbound requests checking local user and remote user requested domains, URLs and links 
against the friendly outbound list, unfriendly outbound list and outbound exception list and then 
with respect to outbound requests for hard filtering unless overruled by the outbound exception 
list or domain inbound exception list either approving the request, terminating the request or 
terminating and re-routing the request without the knowledge of the user, and for soft filtering 
unless overruled by the outbound exception list or domain inbound exception list passing 
disapproved requests and sending an e-mail alert to authorized recipients regarding the 

disapproved request, and 

(ii) a content filtering engine capable of performing content filtering including 
checking a content of a requested document against a friendly content inbound list, an unfriendly 
content inbound list, and a content exception list taken from the encrypted files, the friendly 
content inbound list, the unfriendly content inbound list, only one of the friendly content inbound 
list and the unfriendly content inbound list being active at any given time, and the content 
exception list being uniquely configured by each user, and then for hard filtering against the 
unfriendly content inbound list either passing the requested document if the content of the 
requested document is not on the unfriendly content inbound list or unless overruled by the 
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Mntent of .he rented document is on the «end, y content inbound .is. or rejecting .he 
tn e„ rfH e»d ly eon t e rt in b ou„d»,orun 1 essove™ 1 edb yt heeo„.en.excep.ion 1 U. rei e« i n g .he 

i nhecon.en.isno.o».he«end ly eo».e,inboundUs.orpassin g ,he r e q ues.eddoeu m e n . a nd 
^^^^^^^^^^^ 

^^.^.-^^-^^' , ' h, * M,-,l,,,,,4 " M,,,i 
exception list, 

,„e appncation server acring in.emaU y .0 —ate with .he domain Bering engine 

fa. HTTP c.ien.«, forwards rhe reaues.s .0 servers, receives a server response and forwards .he 
server response to die HTTP clients. 

,4. A versatile customizable security and filtering software, comprising: 
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(a) an administrative module that a user interacts with for creating user accounts and 
configuring those user accounts, and for configuring automated services, 

the admin module for accepting user inputs for configuration settings for inbound 
communications, and having list maintenance functions including list editing, list deleting, 
searching of lists, saving of lists, proxy chaining routing, adding and deleting users, interchanging 
lists and importing and exporting lists, 

said administrative module for configuring a range of access levels and being capable of 
creating three types of user accounts that have unique user names and passwords for each user 
account including an administrator account that is self-configuring and that controls automated 
services and selects for each account hard filtering or soft filtering, regular accounts with 
administrative privileges other than the privilege to create additional accounts, view information 
on any other accounts or configure automated services and regular accounts without 
administrative privileges and in addition a fourth type of user account namely one anonymous 
guest user account to be used in a manual launch of the software by general users who have no 
system-based user name or password, 

the administrative module for storing as encrypted files on hardware memory the 
configurations of the range of access levels for the user accounts created and the configurations of 
the automated services 

(b) an application server including a content filtering engine capable of performing content 
filtering including checking a content of a requested document against a friendly content inbound 
list, an unfriendly content inbound list, and a content exception list taken from the encrypted files, 
the friendly content inbound list, only one of the friendly content inbound list and the unfriendly 
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fe U ith e r u^o^b yt Keco nt e nt excep tio „a St pas si n gtereq ues t ea d ocu ra enU fte 

* — — — — — — * — ' — 

exception list, 

— — -— — , —- 
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from HTTP clients, forwards the requests to servers, receives a server response and forwards the 
server response to the HTTP clients. 

15. A versatile customizable content security software, comprising: 
an administrative module that a user interacts with for creating user accounts, for adding 
and deleting users and for storing as encrypted files on hardware memory the user accounts and 
wherein the administrative module includes an editor, the editor including an editing pane, said 
editor also including an encryption function that generates one or more secret symmetric 
encryption keys, the one or more encryption keys being uniquely associated with a text inputted 
by a user in the editing pane, said encryption function capable of encrypting at the user's option 
all or only a portion of an e-mail message and all or only a portion of an e-mail message 
attachment file and said encryption function also capable of encrypting all or a combination of files 
on a hard drive local to the software. 
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